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DETAILED ACTION 

This office action is in response to the Request for Continued Examination filed 
by the applicant on October 28, 201 0. Claims 1 -5, 7,12-17,1 9, 24 and 26-29 are 
pending and examined. 

Response to Arguments 

Applicant's arguments filed on October 28, 2010 have been fully considered but 
they are not persuasive. 

Applicant amended the independent claims 1 , 13, 26 to incorporate new 
limitations. Applicant's arguments have been fully considered and are moot in light of 
the new grounds of rejection with new reference applied. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1 , 3, 5, 7, 1 2-13, 1 5, 1 7, 1 9, 24 and 26-29 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Nori et al. (WO 01/014962) hereinafter Nori, in view 
of Britton et al. (US patent 6405202), hereinafter Britton. 
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With respect to claim 1 , Nori teaches "system for executing a software 
application comprising a computer system connected to a plurality of 
input/output interfaces and a database, the computer system being arranged for 
implementing a generic application engine and for receiving an application 
specification as input for the generic application engine" (Fig. 4, page 17, line 14- 
24; a computer system in which an application can be built through development of a 
business process); "which generic application engine is connected to the plurality 
of input/output interfaces and to the database, the generic application engine 
being arranged to use a set of functional components, such as database 
operations, logical operations, presentation functions, user input/output 
interfaces, logging and monitoring, to convert the application specification into 
the software application" (Fig. 4, page 19, line 17-23; application engine 408 is 
connected to xml/http interfaces, and to a repository database; page 7, line 17-26; 
business processes are converted into software applications using business rules and 
objects); "the application specification comprising: a) a specification of a plurality 
of data classes, a data class being a description of objects relevant within the 
software application, and the plurality of data classes forming a structure by 
means of relations" (page 36, line 29-34; page 39, line 17-31 ; user defines various 
objects which form a project, objects have relations with each other). 

Nori does not explicitly teach "b) a specification of at least one user group of 
the software application, a user group being defined as a group of users having 
common roles with regard to the software application; and c) an assignment of 
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permissions to the at least one user group with respect to the plurality of data 
classes, wherein the value of each permission is one of the group of: follow 
foreign object or own, wherein the permission own depends on a relation 
between a specific user from a user group and a specific one of the objects 
relevant within the software application". Britton teaches the above limitations (Fig. 
5, column 6, line 33-50; a group access list, which defines what proprieties for users 
having a common role can access; column 6, line 52-67; each object's access control 
comprises a group permission and owner permission, which are used to determine a 
user's access permission; Fig. 8, column 8, line 19-50; in access an object, the security 
policy checks the relation between a specific user and an object, i.e. is the user the 
owner of the object? it also checks permission control for group access of the object 
with respect the user). It would have been obvious at the time of the invention to a 
person of ordinary skill in the art to combine Nori and Britton so the specification defines 
and assigns permissions of the application's access level to users depend on a 
relationship between the users and the objects in the application, because this method 
offers a flexible and customizable way to allow different users access different objects in 
an application. 

Claim 26 is rejected under the same rationale as claim 1 . 

With respect to claim 3, Nori in view of Britton teaches all the limitations of claim 
1 . Nori further teaches "in which the application specification further comprises for 
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each of the plurality of data classes a specification of a plurality of fields, each 
field representing an element for storing data values relating to an object" (page 
39, line 17-28; an object has many attribute fields). 

With respect to claim 5, Nori in view of Britton teaches all the limitations of claim 
1 . Nori further teaches "in which the application specification further comprises for 
each of the plurality of data classes a specification of a plurality of categories, 
which can be used to structure all data related to an object" (page 38, line 2-5; 
categories of artifacts in a hierarchy). 

With respect to claim 7, Nori in view of Britton teaches all the limitations of claim 
1 . Britton further teaches "wherein the permissions are chosen from the group of: 
select permission; read permission; update permission; insert permission; copy 
permission; delete permission" (column 6, line 52-60; read, write and execute 
permissions). 

With respect to claim 12, Nori in view of Britton teaches all the limitations of claim 
1 . Nori further teaches "system for building a software application comprising an 
input/output device, memory means and processing means connected to the 
input/output device and memory means, the processing means being arranged 
for defining an application specification, using the input/output device, and to 
store the application specification in the memory means, which application 
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specification can be input in a system for executing a software application 
according to claim 1" (Fig. 3, Fig. 4, page 16, line 1-17). 

With respect to claim 24, Nori in view of Britton teaches all the limitations of claim 
12. Nori further teaches "defining an application specification and storing the 
application specification, which application specification is arranged to be used 
in a method for executing a software application according to claim 12" (page 1 1 , 
line 9-17; capturing business processes to generate software applications). 

With respect to claim 27, Nori in view of Britton teaches all the limitations of claim 
1 . Britton further teaches "the relation between a specific user from a user group 
and a specific one of the objects relevant within the software application 
comprises a relation between a row value in a database associated with the 
specific user, and a row value in a database associated with the specific one of 
the objects" (column 6, line 52-67; an access control defines a relation between an 
object and a specific user from a user group; column 9, line 13-30; objects and user 
groups are stored in a database; thus, a person skilled in the art would recognize the 
relation between a user and an object is a relation between row values in a database). 



Claim 29 is rejected under the same rationale as claim 27. 
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Claims 13, 15, 17, 19 and 28 recite a method of implementing the system of 
claims 1, 3, 5, 7, 27, thus claims 13, 15, 17, 19 and 28 are rejected under the same 
rationale as claims 1 , 3, 5, 7, 27. 

Claims 2, 4, 14, 16 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Nori (WO 01/014962), in view of Britton, and in further view of Iriuchijima et al. (US 
6070006) hereinafter Iriuchijima. 

With respect to claim 2, Nori in view of Britton teaches all the limitations of claim 
1 . Nori also teaches a class hierarchy (page 32, line 12-14). Nori in view of Britton does 
not explicitly teach "a data class hierarchy is defined in the application 
specification by specifying an extended data class as comprising one or more 
inherited characteristics of an associated super data class ". Iriuchijima teaches "a 
data class hierarchy is defined in the application specification by specifying an 
extended data class as comprising one or more inherited characteristics of an 
associated super data class" (column 1, line 36-54). It would have been obvious at 
the time of the invention to a person of ordinary skill in the art to combine Nori, Britton 
and Iriuchijima so the application specification by specifying an extended data class as 
comprising one or more inherited characteristics of an associated super data class, 
because inheriting characteristics from a super class in a class hierarchy is an efficient 
way of organizing data and it is a well known concept. 
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With respect to claim 4, Nori in view of Britton teaches all the limitations of claim 
3. Nori also teaches a class hierarchy (page 32, line 12-14). Nori in view of Britton does 
not explicitly teach "in which a field hierarchy is defined in the application 
specification by specifying an extended field as comprising one or more inherited 
field characteristics of an associated super field". Iriuchijima teaches "in which a 
field hierarchy is defined in the application specification by specifying an 
extended field as comprising one or more inherited field characteristics of an 
associated super field" (column 1 , line 36-54; child class inherits attribute fields from a 
parent class). It would have been obvious at the time of the invention to a person of 
ordinary skill in the art to combine Nori, Britton and Iriuchijima so the application 
specification by specifying an extended data class as comprising one or more inherited 
characteristics of an associated super data class, because inheriting characteristics 
from a super class in a class hierarchy is an efficient way of organizing data and it is a 
well known concept. 

Claims 14 and 16 recite a method of implementing the system of claims 2 and 4, 
thus claims 14 and 16 are rejected under the same rationale as claims 2 and 4. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to HANG PAN whose telephone number is (571)270-7667. 
The examiner can normally be reached on Mon-Fri, 8:30 AM to 5:30 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Lewis Bullock can be reached on (571)272-3759. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/H. P.I 

Examiner, Art Unit 2193 



/Lewis A. Bullock, Jr./ 

Supervisory Patent Examiner, Art Unit 2193 



